www.ncchomelearning.co.uk

- NCC Resources Ltd -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 3c:36:90:f7:01:32:49:9a:d7:d2:60:57:9e:f6:1d:94 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

NCC Resources Ltd

Organization: NCC Resources Ltd
Organization unit: NCC HOME LEARNING
State / Province: England
Locality: St Helens
Country: GB

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3c:36:90:f7:01:32:49:9a:d7:d2:60:57:9e:f6:1d:94
Serial Number (int): 80037004014165178819907016183680212372
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): ea:ac:b6:c1:89:de:76:83:12:a3:57:50:b7:3a:c2:2e:c3:f2:46:39
Fingerprint (sha256): 50:be:72:4b:b0:37:ec:ab:4d:b8:cd:ee:66:6f:8a:bf:6b:34:ee:f6:14:43:b9:b7:c2:4e:b2:1f:9a:83:e3:75

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate www.ncchomelearning.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ncchomelearning.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ncchomelearning.co.uk

Other certificates including the domain name ncchomelearning.co.uk

(limited to 100 certificates)
ncchomelearning.co.uk
www.ncchomelearning.co.uk
staging.ncchomelearning.co.uk
devlms.ncchomelearning.co.uk
m.ncchomelearning.co.uk
m.ncchomelearning.co.uk
support.qualityspa.fr
staff.ncchomelearning.co.uk
support.ticketselect.io
ncchomelearning.co.uk
help.morewithproject.com
ncchomelearning.co.uk
ncchomelearning.co.uk
support.dgenious.com
support-targetfirst.gekko.fr
lms.ncchomelearning.co.uk
recovery.ncchomelearning.co.uk
servicedesk.netordre.dk
ncchomelearning.co.uk
staging.ncchomelearning.co.uk
m.ncchomelearning.co.uk
lms.ncchomelearning.co.uk
staging.ncchomelearning.co.uk
help.b-focused.eu
devlms.ncchomelearning.co.uk
devlms.ncchomelearning.co.uk
lms.ncchomelearning.co.uk
ncchomelearning.co.uk
support.xpence.uk
support.checkpointsolutions.co.uk
ncchomelearning.co.uk
support-targetfirst.gekko.fr
devlms.ncchomelearning.co.uk
help.b-focused.eu
recovery.ncchomelearning.co.uk
support-targetfirst.gekko.fr
m.ncchomelearning.co.uk
support.ticketselect.io
lms.ncchomelearning.co.uk
m.ncchomelearning.co.uk
devlms.ncchomelearning.co.uk
recovery.ncchomelearning.co.uk
lms.ncchomelearning.co.uk
www.ncchomelearning.co.uk
staging.ncchomelearning.co.uk
lms.ncchomelearning.co.uk
devtester.ncchomelearning.co.uk
devtester.ncchomelearning.co.uk
m.ncchomelearning.co.uk
devlms.ncchomelearning.co.uk
ncchomelearning.co.uk
ncchomelearning.co.uk
ncchomelearning.co.uk
devlms.ncchomelearning.co.uk
ncchomelearning.co.uk
www.ncchomelearning.co.uk
support.topsys.fr
support.xpence.uk
m.ncchomelearning.co.uk
lms.ncchomelearning.co.uk
support.ticketselect.io
recovery.ncchomelearning.co.uk
ncchomelearning.co.uk
desk.houseandpeople.pt
support.ticketselect.io
devlms.ncchomelearning.co.uk
support.socialoutsource.co.uk
support.wowing.io
support.britishschool.ro
supporto.webeasytech.com
recovery.ncchomelearning.co.uk
devlms.ncchomelearning.co.uk
recovery.ncchomelearning.co.uk
m.ncchomelearning.co.uk
support.xeranet.eu
ncchomelearning.co.uk
www.ncchomelearning.co.uk
lms.ncchomelearning.co.uk
recovery.ncchomelearning.co.uk
devtester.ncchomelearning.co.uk
support.cloudants.nl
staging.ncchomelearning.co.uk
support.contextprime.com
ncchomelearning.co.uk
ncchomelearning.co.uk
support.ticketselect.io
m.ncchomelearning.co.uk
lms.ncchomelearning.co.uk
recovery.ncchomelearning.co.uk
support.ticketselect.io
staging.ncchomelearning.co.uk
sales.swift360connect.co.uk
support.ticketselect.io
m.ncchomelearning.co.uk
staging.ncchomelearning.co.uk
m.ncchomelearning.co.uk
helpdesk.diavicom.com
m.ncchomelearning.co.uk
devlms.ncchomelearning.co.uk
devlms.ncchomelearning.co.uk

Certificate

The complete raw certificate details for www.ncchomelearning.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjHMD9XhNWBRt0K1FBaH
/rphHxpwqocihS6Kia+GfqXN+vJpfRrBDl6LwuYjfx6Ijm+bjgAYXD77D9zS0UzS
ejJz+GixBNrQHzQWAMu1X0BOY5oRlrscqi/qZ47L3qq70l3wt9T/Uida8ZMCXdWJ
rUV3xfZeMaHbGSQCk+U62IkujouzzGj/OYcCNTOZlxwJUPqmlKKVonTg8bhghMYx
Isz75nINp18+gU2EL7lA6QNr2HFa671Pe4NdDqfgB/g5TU9wP/2pfsBoMS7YslUe
L9en9hPUy0/yHJjQ+JnHGTsDinGVrXhJ5wBJ9oIbIrejwptUox3CGU8PDxxkkbZl
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 80037004014165178819907016183680212372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'England'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'St Helens'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NCC Resources Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NCC HOME LEARNING'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.ncchomelearning.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25019740256699825935513188319808727736773276751365400245499951185355141882555946723540457482882931975531752691969880352380945472517050778913032487978401565365227049892377643390828898252430229102864663055536338804856319556083196832459955409262385649529239619213239968548922327316985631383271950490957590262124037066650883811299774336099423966660527160403523184624875606840475537543787176778331840094812043142859551884061835451378627817360603027223448078641766528484334913882096643566600002842800425661908529379205682420299928450088774346940139113109025914881735217144220122966449569129646710804860715976918793952060709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncchomelearning.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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